CVE-2024-50691

SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app...

CVE-2024-50691

creationtimestamp| type| source ---|---|--- 2025-02-26 21:53:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072408550773487 2025-02-26 23:33:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jztungb26 2025-02-27 00:19:31+00:00| seen| https://t.me/cvedetector/189...

CVE-2024-50691

The SunGrow iSolarCloud Android app (versions V2.1.6.20241104 and prior ) is vulnerable to Man-in-the-Middle (MiTM) attacks due to Missing SSL Certificate Validation . The application explicitly ignores certificate errors, allowing an attacker to impersonate the iSolarCloud server and intercept c...